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4 November 1975 



MEMORANDUM FOR THE RECORD 

SUBJECT: Project ORACLE Management Review Meeting 


STATINTL 


The ORACLE Project monthly review was held at the Agency 
on 30 October 1975. Present at the meeting were: 


STATINTL 


The meeting closely followed the agenda (attached) except 
four specific problems were discussed in the afternoon. The 
summary overview, review of the action items, and the cost 
review did no t add a nything to the information package we 
received from | | the previous week. The hardware and 

software reviews are discussed in the following pages. 


STATINTL 
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Hardware Review 


STATIWTL 


| i presentation followed very closely the written 

report which was submitted the previous week. He noted that 
the Channel Simulators w hich a re behi nd schedule do ^not 
impact the 


PS AT. 


asked that the 


| | >*- ■ i i — — i 

PSAT which is primarily a hardware test be rescheduled for 
February 1976, just prior to shipment of the hardware. They 
did not give any reasons for this change. 


Ml 

til 


STATIWTL 


|reported that continued testing of the hardware 
has revealed several deficiencies. He is still generating 
engineering changes and has started a se cond shi ft operation 
to work on the problem of data accuracy. I I reported at 


STATIWTL 


last month' s review that the hardware was placed in a controlled 
maintenance environment on 4 August. This seems to be a meaningless 
statement; most of the engineering labor is going to tasks 
other than maintenance. In any case, it is obvious that at 
this time more than a field engineer is required to keep the 
hardware operational. It should also be noted that total 
hardware labor currently charged to ORACLE is at the same 
level as that in August 1974. 


Software Review 


STATIWTL 


said] 


"| presented the software status review. She 
J has been concentrating on preparing the modules 


STATIWTL 


which make up the system to be used for the Pre-shipment 
Acceptance Test (PSAT) . The Monthly Technical Progress 
Report delivered the week before and the viewgraphs she 
presented at the meeting indicated all is well and work 
is going pretty much as planned. It was only after questioning 
that | I admitted to being late with the system integration 

and had incorrectly reported six tasks as complete which 
have yet to be finished. It was also noted that the test 
jobstream we delivered to them in August has not been run 
yet . 


STATIWTL 


STATIWTL 


has set 3 Nov ember 1975 as the day of decision 


as to whether or not the 


PSAT will be conducted 


as scheduled during the period 16-26 November. , 

said there is less than a 50% chance of a go decision. This 
cont rasts m ightily with the written reports we have received 
from I I 


STATIWTL 

STATIWTL 


STATIWTL 
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STATIMTL 


,u I Pointed out that it would be absurd to have a 

PSAT as scheduled because presently there are restrictions 

, , , ■ .. Mhinh will Guarantee failure. inis svauc 


FbAT as buiicutu-im or- - Thiq state 

T7 u + . Vl -in +-he svstem which will guarantee failure. inis bmlb 

S pLSLSfSn several contradictory s olutions F-t^ 

to run the tests, worry about lanuie uL . that time .a na then 

address the contractual problems concer ning ^AT. I 

I 1 asked us to redefine the tests so | | could pass unem, 

S solution he felt would improve the programmer s morale. 
He fears that otherwise the software group will lose it 
"momentum". The Agency did not promise to redefine the test 

After the PSAT d i scussion , l~ [ reported that PSAT 

preparation and training of recently hired 'programmers has 

reused some delays. She also noted that scheduled future 
development of the Data Management System 

November? - face 

work is necebbeuy ¥ knded her briefing by 

program maintenance. ^jnaea nei ^ ^ 


describing their neAy developed program Trouble Report system. 

A comment about the PSAT schedule and the state of 

software development is necessary here. I was informed 
sof tware deve op ^ weeks ago that the project is not 

— » ■ _ -i 1 nn c 


going S well^ These - genGemen^discovered several serious 

oroblems which will be d iscusse d later m this report. The 
most astounding was that l ~~l did not want the government 
to check the data accuracy of the ORACL^ system during the 


PSAT. I immediately called, 

asked tor ex planations on all points. He admitte to 


l 


he 


asked tor explanations on an 

problems but would not discuss reasons or responsibility 
He said higher level management had not been ^formed 

asked him to be prepared to present . 1 meeting 

Management Review Meeting. By the time of the meeting 

realized that it would look ridiculous not to test 

"data — accuracy and so dropped their request to^elete that 


JL ow -*■ i— 

aspect of PSAT. As to the other problems,! 

bring them up for discussion; therefore, I asked that they 


-LllH - , , 

be considered separately later in the day. 
been aware of the problems turned up by l 

_ i ri 4 nn 


had already 


] and 


it is clear they had no intention of re vealing them 


Based on 


history 


nntil the final acceptance period. — .. 

Reticence, I am concerned there could be other serious 

problems waiting for us. 



STATIMTL 


STATIMTL 


ft 


STATIMTL 

STATIMTL 

STATIMTL 


STATIMTL 

STATIMTL 

STATIMTL 

STATIMTL 

STATIMTL 

STATIMTL 
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STATINTL 


STATINTL 


STATINTL 


STATINTL 

STATINTL 

STATINTL 


Major Problems 


Expandability of the ORACLE Hardware 

| 1 informed us that when additional hardware is 

added to the system there will be certain restrictions. 

They are briefly summarized below: 

a) "Perfect switching" is lost between Data Channels (DC's) 
and External Data Channel Processors (EDCP s) when the 
number of EDCP ' s is increased. 

b) "Perfect switching" is lost between Data Channels (DC s) 
and Transport Drivers (TD's) when the number of DC s is 
increased and/or the number of TD's is increased. 


I has defined "perfect switching" as the ability of one 
device to be accessed by any other device. Perfect switching 
permits straightforward software handlers and guarantees that 
any single device failure will not cause the system to be 
inoperable but will result only in some degree of degradation. 


During the discussion, 


took the position that 


curing uie <xxo<-<u.ooxwii , | | ~ ~ - . 

they never said perfect switching would be provided with 
hardware expansion. At this time software has not been 
designed to handle the more severe problems of ac cessing 
and recovery from device failures. — I I suggested 


we document our requirements and 


I 

"Iwill review them, 


STATINTL 


STATINTL 

STATINTL 


Functional Growth of the ORACLE System 


Irevealed that at any given time only one of 

—I _ 1 / n/’i'n \ onPflcc fTiP n ‘ 


it:v caxcu. uuu c ^ z) — — 

the Storage Control Processors (SCP) can access the entire 
bank of Transport Drivers. Thus although we have two SCP s, 
it becomes impossible to isolate hardware devices such 
that production can be serviced with one while local 
modifications and major enhancement efforts can be supporte 

by the second one. 


[ 


1 again took the position that they have not committed 

J 1 I 4-Vi = +- wo rl nciimprih 


a design error. As before 
our requirements for 


review. 


asked that we document 

privately STATINTL 


UUI ItJUUliciuciito I ■ — — — i . _ _p 

expressed that the reason we purchased two SCP s was out of 
generosity. 

A side light of this problem is that this situation 
inhibits some types of hardware diagnostics. Complete 
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STATINTL 

STATIWTL 


STATINTL 

STATINTL 


testing and repair of the Transport Driver Interface can 
only be performed by shutting down the production 
The same holds true for initializing the mass storage tape . 
This operation cannot be performed on the spare SCP. it 
must be done using the active SCP which we feel can only be 
used to service production. 

Software Deficiencies 


i i has designed the ORACLE software such that^a 

dedicated disk controller is required to permit an SCP 
to service the internal system files. This aspect of the 
desian is contrary to the Design Specification; however, ^ 
^denies this. They have flatly stated that without 


denies tms. mey aavc ^ — - — — - 

dedicated controller the system will simply not function. 

The result here is that more money and space will be 
required for back-up controllers. More importantly, the 
design they are proposing introduces a condition where a 
single device failure can bring down the entire production 
system. If the dedicated controller fails, a spare one mus 
be switched to the SCP while the failed one is being 
The specification calls for shared controllers such that a 
failure will only degrade performance rather than bring the 
system to a stop. 


Last but not least, 


stated that the system will 

use only '"one ~SCP "at a time, rather than two. The second SCP 
is only for redundancy and will be of use only when _ e 
first one fails. At this time we cannot Ijudge the impact of 
this unilateral decision to change the specification, 
one SCP can provide the necessary performance level, no great 

harm will be done. Further, the control software will be 

greatly simplified. Agency agreement here will provide 

the opportunity to apply manpower to other areas. STATINTL 

My view is that all of the problems described above 
result from not adhering to the specifications stated in 

the I 1 technical proposal and in the 19 March Mass Storage 

System Design, both of which are part of the contract All 
but the last problem, single SCP control, have adverse 
consequences. Most systems suffer from shortcutting but 
planned deficiencies for a system that has a strong chance 
of being a one-of-a-kind will surely invite disaster. The 
software team has already shown it has severe problems with 
its performance. I would not like to see that same group try 
to mitigate hardware problems with clever software. 
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Finally, the most serious aspect is that| ZZI . did not 

voluntarily inform us of any of the problems. We discovered 
them all after the fact. 


STATIWTL 


STATIWTL 

Manager, Project ORACLE 
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W AGENDA 

* TMS-2 mass storage system 

OCTOBER PROGRESS REVIEW 


I ... LOCATION 

C.I.A. Headquarters, McLean, Va. 


II. 

STATIWTL 


SCHEDULE 

Thursday, October 30, 1975, 0900 - 1430 Hour 


AGENDA 

ITEMS 

0900 - 

0915 

0915 - 

0930 

0930 - 

1000 

1000 - 

1015 

1015 - 

1130 

1130 - 

1300 

1300 - 

1315 

1315 - 

1330 

1330 - 

1430 


Introduction/Summary Overview 
Review of Meeting Action Items 

* 

Hardware Review/Status 
Break 

Software Review/Status 
Lunch . 

Cost/Financial Report Review 

Other Open Items/Establish Schedule for 
November Review 

Summary Review and Action Items List 


WMS 

10-20-7 5 


Approved For Release 2002/08/15 : CIA-RDP83T00573R000500080010-1 






